For many reasons, you may find yourself needing to start a new Mavericks Open Directory server from scratch. In this article, I’ll go over how to import your existing users from an older Open Directory server and import them to your new Mavericks server. I will also use a tool called Passenger to import known passwords for your users. In my environment, I have a Mountain Lion Profile Manager 2 server which also runs Open Directory. This server was originally a Lion Server, with user accounts imported from a Snow Leopard Open Directory server. I imported these users to the Lion server with Workgroup Manager. I had to do this, because Lion Server was so incredibly broken that migrations, archive/restores, simply did NOT work. So Exporting/Importing via Workgroup Manager was my only solution. However, much to my dismay, because I had imported my users with Workgroup Manager, many Service ACLs were borked. For example, my Open Directory users could not access http://server.com/mydevices. So the time had finally come for me to rectify this with a clean Open Directory server.
Step One: Export users from Workgroup Manager Connect to your existing Open Directory server with Workgroup Manager. Highlight the users you want to export from your Open Directory, making sure to exclude the original Directory Administrator account. Command-A to select all and command-click to deselect Directory Admin works well. Under the Server menu, select Export. This creates a colon delimited file that contains all of your user records. Repeat this export for your user groups. Step Two: Import your users and groups into Server.app Note: configuring Mavericks server and turning on Open Directory is left as an exercise for the reader. Open up Server.app and go to Manage > Import Accounts from File

]1 Import in Server.app

]3 Export Settings for Passenger
Recent Comments